$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/3c8dc3fa-b3c4-3a8e-ab71-7e6a16d841d3.roa File: 3c8dc3fa-b3c4-3a8e-ab71-7e6a16d841d3.roa (raw, json) Hash identifier: KrAiDvhg8jBHz4Mo7TNpdIL2/Wo6tDmrKKMaXEOE3sI= Subject key identifier: C0:F3:E3:6B:6C:6D:21:75:93:7E:38:D9:E0:C2:89:A8:BA:DB:BC:0E Certificate issuer: /CN=8b3000e8-1e0f-482a-991d-e2358c249593 Certificate serial: 010D0C9F4328584A9E9665EDBBD97C491F557750 Authority key identifier: 78:D3:A4:19:FA:42:EF:0F:DA:59:C8:8F:EF:4F:C4:28:D9:7F:77:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/3c8dc3fa-b3c4-3a8e-ab71-7e6a16d841d3.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 203963 IP address blocks: 206.168.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:65:ed:bb:d9:7c:49:1f:55:77:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b3000e8-1e0f-482a-991d-e2358c249593 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=906c422e-658b-4edc-9129-493abb589623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7c:25:99:06:f2:cf:23:28:2d:64:cc:7a:6f: 62:10:c6:24:a4:b9:94:fe:c0:5b:a8:17:e3:d8:6c: 5d:bf:62:b9:e6:4d:4f:bf:11:59:cf:86:20:87:8f: ed:20:b5:bf:70:5c:f4:ef:40:5b:19:2b:29:05:33: bd:77:1a:97:6e:f3:6a:d5:5f:08:19:3b:5a:52:f1: af:92:66:ce:c5:73:2e:39:95:17:73:bf:c1:5f:80: ff:38:6b:84:2c:87:aa:41:13:8c:41:fb:67:d5:fe: 39:34:19:45:67:a9:ee:f6:e7:f6:3e:08:99:7e:07: 70:f2:6b:54:3e:b9:4f:1e:e8:27:96:7f:9e:f6:bf: 80:ab:0d:f7:42:8c:72:bf:55:13:2e:d0:2a:68:4c: 60:52:98:3f:a5:a8:8a:33:ce:3c:fd:4d:94:29:58: f8:a8:6a:be:5b:aa:ec:f5:a8:7f:5f:8b:2d:89:a8: 1c:1d:f4:46:bf:9a:5a:98:9e:b9:d8:e1:80:4e:20: ae:29:e4:a8:73:f4:5c:69:1c:e3:82:d5:bb:8b:74: ca:54:20:4b:e3:e9:9e:d8:2a:c7:37:74:bc:4d:6a: a7:74:83:19:ff:da:a8:cf:b0:41:95:c9:11:8e:3f: 56:07:cf:f0:09:4b:cc:f2:34:de:c4:ec:62:01:13: b8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F3:E3:6B:6C:6D:21:75:93:7E:38:D9:E0:C2:89:A8:BA:DB:BC:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/3c8dc3fa-b3c4-3a8e-ab71-7e6a16d841d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.crl X509v3 Authority Key Identifier: keyid:78:D3:A4:19:FA:42:EF:0F:DA:59:C8:8F:EF:4F:C4:28:D9:7F:77:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593.cer sbgp-ipAddrBlock: critical IPv4: 206.168.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:e2:ea:ed:ba:41:9d:18:78:2d:7b:12:f9:21:6c:78:e3:d4: 77:ba:69:af:a6:0e:84:e5:92:a3:84:cb:c7:47:6e:21:4a:42: 3e:85:ee:e8:02:40:5f:2c:e2:4b:8b:17:19:0d:0e:20:90:50: 68:75:71:a7:ba:31:59:10:6d:80:e1:b0:30:53:e6:a1:01:05: a5:3e:ca:59:ad:0a:72:9c:e2:17:49:c0:ec:d2:e0:6b:4c:cc: 89:8f:16:bb:dd:b5:93:ec:fc:c7:2a:82:89:0c:89:53:01:bf: 87:f1:72:d7:b0:71:0d:e1:9d:91:58:af:fb:73:c5:ef:09:cf: ad:12:1d:4c:91:33:ca:d1:75:88:d1:a0:c8:87:38:be:d8:57: 60:f1:05:43:de:aa:8e:4a:e8:82:c6:65:6d:55:a7:41:83:17: 58:b0:2e:4d:34:0e:0a:e7:30:c1:11:92:1c:bd:59:1c:9d:25: fb:8c:2f:38:1f:71:75:a4:e3:ef:44:dc:bc:77:37:1a:02:20: c4:56:33:0d:59:10:a9:d7:e2:f6:47:9a:76:e0:e5:52:db:98: 60:a9:3e:9e:45:f8:53:41:e2:20:36:d1:be:c3:82:0b:db:54: 7c:ae:5e:e1:49:8f:d2:6b:dc:39:0f:7d:d4:b8:a2:3c:6f:f3: cc:b2:89:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelmXtu9l8SR9Vd1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzMDAwZTgtMWUwZi00ODJhLTk5MWQtZTIzNThjMjQ5 NTkzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OTA2YzQyMmUtNjU4Yi00ZWRjLTkxMjktNDkzYWJiNTg5NjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHwlmQbyzyMoLWTMem9iEMYkpLmU/sBbqBfj 2Gxdv2K55k1PvxFZz4Ygh4/tILW/cFz070BbGSspBTO9dxqXbvNq1V8IGTtaUvGv kmbOxXMuOZUXc7/BX4D/OGuELIeqQROMQftn1f45NBlFZ6nu9uf2PgiZfgdw8mtU PrlPHugnln+e9r+Aqw33Qoxyv1UTLtAqaExgUpg/paiKM848/U2UKVj4qGq+W6rs 9ah/X4stiagcHfRGv5pamJ652OGATiCuKeSoc/RcaRzjgtW7i3TKVCBL4+me2CrH N3S8TWqndIMZ/9qoz7BBlckRjj9WB8/wCUvM8jTexOxiARO4hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDz42tsbSF1k3442eDCiai627wOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjMw MDBlOC0xZTBmLTQ4MmEtOTkxZC1lMjM1OGMyNDk1OTMvM2M4ZGMzZmEtYjNjNC0z YThlLWFiNzEtN2U2YTE2ZDg0MWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGIzMDAwZTgtMWUwZi00ODJhLTk5 MWQtZTIzNThjMjQ5NTkzLzhiMzAwMGU4LTFlMGYtNDgyYS05OTFkLWUyMzU4YzI0 OTU5My5jcmwwHwYDVR0jBBgwFoAUeNOkGfpC7w/aWciP70/EKNl/dzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjMwMDBlOC0xZTBmLTQ4MmEtOTkxZC1lMjM1 OGMyNDk1OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLi6u26QZ0YeC17EvkhbHjj1He6aa+mDoTlkqOEy8dHbiFKQj6F7ugC QF8s4kuLFxkNDiCQUGh1cae6MVkQbYDhsDBT5qEBBaU+ylmtCnKc4hdJwOzS4GtM zImPFrvdtZPs/McqgokMiVMBv4fxctewcQ3hnZFYr/tzxe8Jz60SHUyRM8rRdYjR oMiHOL7YV2DxBUPeqo5K6ILGZW1Vp0GDF1iwLk00DgrnMMERkhy9WRydJfuMLzgf cXWk4+9E3Lx3NxoCIMRWMw1ZEKnX4vZHmnbg5VLbmGCpPp5F+FNB4iA20b7Dggvb VHyuXuFJj9Jr3DkPfdS4ojxv88yyiXQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:54:55 2025 by rpki-client